You have three on-premises servers named Server1, Server2, and Server3 that run Windows Server 2019. Server1 and Server2 are located on the internal network. Server3 is located on the perimeter network. All servers have access to Azure.
From Azure Sentinel, you install a Windows firewall data connector.
You need to collect Microsoft Defender Firewall data from the servers for Azure Sentinel.
What should you do?

A. Create an event subscription from Server1, Server2, and Server3.

B. Install the On-premises data gateway on each server.

C. Install the Microsoft Monitoring Agent on each server.

D. Install the Microsoft Monitoring Agent on Server1 and Server2. Install the On-premises data gateway on Server3.








 

Suggested Answer: C

Reference:
https://docs.microsoft.com/en-us/azure/sentinel/connect-windows-firewall

This question is in AZ-500 Exam
For getting Microsoft Azure Security Engineer Associate Certificate


Disclaimers:
The website is not related to, affiliated with, endorsed or authorized by Microsoft. 
The website does not contain actual questions and answers from Microsoft's Certification Exams.
Trademarks, certification & product names are used for reference only and belong to Microsoft.